deps: Bump rules_rust to 0.67.0

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Author: mmorel-35

.bazelrc

@@ -117,7 +117,6 @@ common:clang-common --action_env=BAZEL_COMPILER=clang
 common:clang-common --linkopt=-fuse-ld=lld
 common:clang-common --action_env=CC=clang --host_action_env=CC=clang
 common:clang-common --action_env=CXX=clang++ --host_action_env=CXX=clang++
-common:clang-common --incompatible_enable_cc_toolchain_resolution=false
 
 # Clang with libc++ (default)
 common:clang --config=clang-common
@@ -133,15 +132,7 @@ build:gcc --action_env=CC=gcc --action_env=CXX=g++
 # option not play well with fission:
 # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110885
 build:gcc --copt=-fno-debug-types-section
-# These trigger errors in multiple places both in Envoy dependecies
-# and in Envoy code itself when using GCC.
-# And in all cases the reports appear to be clear false positives.
-build:gcc --copt=-Wno-error=restrict
 build:gcc --copt=-Wno-error=uninitialized
-build:gcc --cxxopt=-Wno-missing-requires
-build:gcc --cxxopt=-Wno-dangling-reference
-build:gcc --cxxopt=-Wno-nonnull-compare
-build:gcc --incompatible_enable_cc_toolchain_resolution=false
 build:gcc --linkopt=-fuse-ld=gold --host_linkopt=-fuse-ld=gold
 
 # libc++ default for clang
@@ -387,7 +378,6 @@ build:sizeopt -c opt --copt -Os
 
 # Remote execution: https://docs.bazel.build/versions/master/remote-execution.html
 build:rbe-toolchain --action_env=BAZEL_DO_NOT_DETECT_CPP_TOOLCHAIN=1
-build:rbe-toolchain --incompatible_enable_cc_toolchain_resolution=false
 
 build:rbe-toolchain-clang --config=rbe-toolchain
 build:rbe-toolchain-clang --config=clang

bazel/repositories.bzl

@@ -112,10 +112,12 @@ def _go_deps(skip_targets):
 def _rust_deps():
     external_http_archive(
         "rules_rust",
-        patches = ["@envoy//bazel:rules_rust.patch", "@envoy//bazel:rules_rust_ppc64le.patch"],
+        patches = ["@envoy//bazel:rules_rust.patch"],
     )
 
 def envoy_dependencies(skip_targets = []):
+    external_http_archive("platforms")
+
     # Treat Envoy's overall build config as an external repo, so projects that
     # build Envoy as a subcomponent can easily override the config.
     if "envoy_build_config" not in native.existing_rules().keys():

bazel/repository_locations.bzl

@@ -1556,6 +1556,25 @@ REPOSITORY_LOCATIONS_SPEC = dict(
         license = "Emscripten SDK",
         license_url = "https://github.com/emscripten-core/emsdk/blob/{version}/LICENSE",
     ),
+    # NOTE: Required for rules_rust 0.67.0 compatibility with Bazel 7.x.
+    # This provides the UEFI platform constraint used by rules_rust.
+    # May be removable once Envoy upgrades to Bazel 8.0+ which includes this by default.
+    # See: https://github.com/envoyproxy/envoy/pull/41172#issuecomment-2365923085
+    platforms = dict(
+        project_name = "platforms",
+        project_desc = "Constraint values for specifying platforms and toolchains",
+        project_url = "https://github.com/bazelbuild/platforms",
+        version = "1.0.0",
+        sha256 = "852b71bfa15712cec124e4a57179b6bc95d59fdf5052945f5d550e072501a769",
+        strip_prefix = "platforms-{version}",
+        urls = [
+            "https://github.com/bazelbuild/platforms/archive/{version}.tar.gz",
+        ],
+        release_date = "2025-05-27",
+        use_category = ["build"],
+        license = "Apache-2.0",
+        license_url = "https://github.com/bazelbuild/platforms/blob/{version}/LICENSE",
+    ),
     # After updating you may need to run:
     #
     #     CARGO_BAZEL_REPIN=1 bazel sync --only=crate_index
@@ -1564,8 +1583,8 @@ REPOSITORY_LOCATIONS_SPEC = dict(
         project_name = "Bazel rust rules",
         project_desc = "Bazel rust rules (used by Wasm)",
         project_url = "https://github.com/bazelbuild/rules_rust",
-        version = "0.56.0",
-        sha256 = "f1306aac0b258b790df01ad9abc6abb0df0b65416c74b4ef27f4aab298780a64",
+        version = "0.67.0",
+        sha256 = "dc287e3eca80b29d5cc95e261cae273eedf1af4a00a96ae937e234534dadb24c",
         # Note: rules_rust should point to the releases, not archive to avoid the hassle of bootstrapping in crate_universe.
         # This is described in https://bazelbuild.github.io/rules_rust/crate_universe.html#setup, otherwise bootstrap
         # is required which in turn requires a system CC toolchains, not the bazel controlled ones.
@@ -1576,7 +1595,7 @@ REPOSITORY_LOCATIONS_SPEC = dict(
             "dataplane_ext",
         ],
         extensions = ["envoy.wasm.runtime.wasmtime"],
-        release_date = "2024-12-16",
+        release_date = "2025-10-23",
         cpe = "N/A",
         license = "Apache-2.0",
         license_url = "https://github.com/bazelbuild/rules_rust/blob/{version}/LICENSE.txt",

bazel/rules_rust.patch

@@ -1,8 +1,8 @@
 --- rust/private/rustc.bzl
 +++ rust/private/rustc.bzl
-@@ -1451,7 +1451,7 @@ def rustc_compile_action(
-         })
-         crate_info = rust_common.create_crate_info(**crate_info_dict)
+@@ -1612,7 +1612,7 @@ def rustc_compile_action(
+             **crate_info_dict
+         )
 
 -    if crate_info.type in ["staticlib", "cdylib"]:
 +    if crate_info.type in ["staticlib", "cdylib"] and not out_binary:
@@ -12,7 +12,7 @@
 
 --- rust/private/rustc.bzl
 +++ rust/private/rustc.bzl
-@@ -1043,7 +1043,7 @@ def construct_arguments(
+@@ -1061,7 +1061,7 @@ def construct_arguments(
 
      if toolchain.llvm_cov and ctx.configuration.coverage_enabled:
          # https://doc.rust-lang.org/rustc/instrument-coverage.html